A local, offline security monitor — audit what starts with your machine, watch for new processes, see which app is using your mic/camera, review logins, and flag unknown devices on your network. No network egress, no telemetry.
Part of the open-source Strix Advanced Tools suite.
| Check | What it does |
|---|---|
| Startup audit | Lists everything that auto-starts and flags anything new since your approved baseline. |
| Process watch | Reports newly started processes in real time, with full executable path. |
| Mic & camera | Shows which apps are using — or recently used — your microphone / webcam. |
| Login audit | Recent interactive logins and failed password attempts. |
| Network guard | Scans your local subnet and flags devices whose MAC isn't on your trusted list. |
- Windows — a dark-themed GUI (
sentinel.py, tkinter, zero third-party dependencies). Uses the registry, event log,schtasks, and Win32 APIs. - Linux — a scriptable CLI (
sentinel_linux.py) that performs the same five checks via native sources (/proc,systemd,cron,journalctl,ip). A CLI is the natural fit for a Linux security tool: it runs headless and over SSH.
Both share the same detection concepts and the same "read-only, offline" guarantees.
:: from source (Python 3.10+ — no pip packages needed)
run_sentinel.batThe Login audit tab needs Administrator (to read the Security event log); right-click
run_sentinel.bat → Run as administrator. Everything else runs unprivileged.
sudo apt install ./strix-sentinel_1.0.0_all.deb # from Releases
# or from source:
sudo ./linux/install.sh # add --user for a per-user install
sentinel all # run every check once
sentinel startup --approve # set your startup baseline
sudo sentinel logins # login audit needs root to read system logs
sentinel network --approve # trust the currently-seen devicesSee docs/install-linux.md and docs/usage.md.
Sentinel is read-only and offline: it never sends anything, spawns no shell (all tools are called with argument lists), uses no dynamic code, and only the login audit needs elevation (and degrades gracefully without it). Full details: SECURITY.md.
MIT © 2026 Strix Advanced Tools.